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Top Stories 

• Ten individuals were indicted May 22 in connection to a $20 million identity theft and tax 
refund fraud scheme that stole identities, filed fraudulent tax returns, and cashed fraudulent 
checks at businesses in Alabama, Georgia, and Kentucky. - Network World (See item 5 ) 

• The Ball Metal Beverage Container plant in Monticello, Indiana, was evacuated for several 
hours May 23 due to an explosion and fire that spread throughout the entire ducting system 
and out the roof. - WLFI 18 Lafayette (See item 11 ) 

• Crews reached 5 percent containment of the 7,500-acre Slide Fire near Slide Rock State 
Park in Arizona May 22, while about 3,200 residents in Coconino County were given pre- 
evacuation notices and nearly 300 homes and businesses in the area were evacuated. - 
CNN (See item 17 ) 

• Five commercial and eight residential buildings in the Manhattan area of New York City 
were without water for several hours and basements in the area flooded May 22 after a 20- 
inch water main broke. - WNBC 4 New York City (See item 27 ) 
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Energy Sector 



1. May 22, Associated Press - (North Carolina; Virginia) EPA reaches deal with Duke 
to clean river coal ash. Duke Energy and the U.S. Environmental Protection Agency 
(EPA) reached a deal May 22 regarding cleanup from a February 2 coal ash spill into 
the Dan River that coated 70 miles of waterway in North Carolina and Virginia when a 
pipe collapsed at Duke’s Dan River Steam Station. The EPA will oversee cleanup 
efforts in consultation with federal wildlife officials under Superfund law provisions 
and Duke Energy will reimburse the federal government for its oversight costs. 

Source: http://www.npr.org/templates/storv/storv.php?storvId=3 14954977 

[ Return to top ] 

Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. May 23, Reuters - (National) Suzuki recalls 184,244 GM-built cars in U.S. for fire 
risk. Suzuki Motor Corp., announced a recall of 184,244 model year 2004-2008 
Forenza and Reno vehicles manufactured by General Motors due to a daytime running 
lights issue that could cause a fire. 

Source: http://news.msn.com/us/suzuki-recalls-184244-gm-built-cars-in-us-for-fire-risk 

3. May 22, NBC News - (National) Toyota recalls 430,500 vehicles for three issues. 
Toyota issued three recalls May 22 covering 430,500 vehicles, the majority of which 
are 370,000 model year 2004-2011 Sienna vehicles registered in colder climate States 
due to a spare tire support cable corrosion issue. The other recalls covered 50,000 
model year 2014 Highlander vehicles with an airbag deployment issue and 10,500 
model year 2013 Lexus GS350 vehicles due to a faulty automatic braking feature. 
Source: http://www.nbcnews.com/business/autos/toyota-recalls-430-500-vehicles- 
three-issues-nl 12151 

4. May 22, U.S. Consumer Product Safety Commission - (National) Cordelia Lighting 
recalls two-lamp Fluorescent Shop Lights due to fire hazard; sold exclusively at 
Home Depot. Cordelia Lighting announced a recall May 22 for around 222,000 
Fluorescent Shop Lights due to possibility of the lamp sockets allowing loose 
connections that pose the risk of creating an electrical arc and fire. The lamps were sold 
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at Home Depot stores between August 2013 and March 2014. 

Source: http://www.cpsc.gov/en/Recalls/2014/Cordelia-Lighting-Recalls-Two-Lamp- 
Fluorescent-Shop-Lights/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. May 22, Network World - (Alabama; Georgia; Kentucky) Department of Justice 
bashes $20 million identity refund fraud ring. The U.S. Department of Justice 
announced the indictment May 22 of 10 individuals for allegedly running a $20 million 
stolen identity and tax refund fraud scheme that stole identities, filed fraudulent tax 
returns, and cashed fraudulent checks at businesses in Alabama, Georgia, and 
Kentucky. The accused allegedly obtained identities from a hospital on Fort Benning 
military base in Georgia, the Alabama Department of Corrections, another Alabama 
government agency, and a Columbus, Georgia company. 

Source: http://www.networkworld.com/news/2014/052214-doi-bashes-281846.html 

6. May 22, Denver Post - (Colorado) Woman pleads guilty to fraud costing hundreds 
of thousands of dollars. A woman and three co-defendants pleaded guilty in a Denver 
court to running an insurance fraud ring between 2007 and 2012 that submitted false 
claims to insurers and defrauded the companies of $192,488. 

Source: http://www.denverpost.com/news/ci 25817355/woman-pled-guilty-fraud- 
costing-hundreds-thousands-dollars 

7. May 22, Orange County Register - (California) Huntington attorney among 7 
accused of $13.5 million loan-mod scam. A Huntington Beach lawyer and seven 
others were indicted May 22 on charges that they allegedly ran a $13.5 million loan- 
modification scam that defrauded 3,500 individuals. The alleged scheme used 
telemarketers to target victims in California and other States. 

Source: http://www.ocregister.com/articles/people-615397-wagner-gressier.html 

T Return to top i 

Transportation Systems Sector 

8. May 23, NJ.com - (New Jersey) Gas main leak shuts down Route 202/206 traffic in 
Somerville, Bridgewater. Route 202/206 in Somerville north of the Route 22 
intersection was closed for more than 19 hours May 22-23 after a gas main broke, 
causing the Bridgewater Township Police to divert all traffic until the break was 
repaired. 
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Source: 

http://www.ni.com/somerset/index.ssf/2014/05/gas main leak has route 202206 traff 
ic diverted in somerville.html 



9. May 22, WLOS 13 Asheville - (South Carolina) Upstate logging truck accident. A 
portion of Highway 25 near Greenville was shut down for 3 hours May 22 after a semi- 
truck spilled logs across the roadway when it hit a small trailer in order to avoid 
crashing into a semi-truck carrying ethanol. 

Source: http://www.wlos.com/shared/news/features/top-stories/stories/wlos upstate- 
logging-truck-accident- 16354.shtml 

10. May 22, Riverside Press-Enterprise - (California) Murrieta: Woman dies after 
crashing into overturned truck. A driver was killed May 22 after crashing into an 
overturned vehicle that had collided with another vehicle on Interstate 15 in Murrieta, 
prompting the closure of all northbound lanes for 3 hours. Authorities are investigating 
the incident. 

Source: http://blog.pe.com/breaking-news/2014/05/22/murrieta-big-rig-overtums-at- 
least-one-killed/ 
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Food and Agriculture Sector 

11. May 23, WLF1 18 Lafayette - (Indiana) Explosion, fire causes damage to Ball Metal 
Beverage Container plant. The Ball Metal Beverage Container plant in Monticello, 
Indiana, was evacuated for several hours May 23 when a fire began in an oven and 
spread to the factory’s ductwork, leading to an explosion that caused the fire to spread 
throughout the entire ducting system and out the roof. Fire officials estimated that the 
facility suffered hundreds of thousands of dollars in damage. 

Source: http://wlfi.com/2014/05/23/explosion-fire-causes-damage-to-ball-metal- 
beverage-container-plant/ 

12. May 22, WSOC 9 Charlotte - (North Carolina) Health Dept.: Wrong hep A dosages 
given after Papa John's exposure. The Mecklenburg County Health Department 
notified about 30 people during the week of May 12 that they received the incorrect 
dose of a hepatitis A vaccination at department-held clinics related to an ill worker at a 
Charlotte Papa John’s restaurant. Officials stated that people received doubles doses of 
the vaccine or not enough, but there were no reported impacts from the mistake. 

Source: http://www.wsoctv.com/news/news/local/health-department-incorrect- 
hepatitis-dosages-admi/nf5gm/ 

13. May 21, U.S. Food and Drug Administration - (National) Kind Healthy Snacks issues 
allergy alert due to potential presence of peanut protein in Strong & Kind Bars 
and Kind Healthy Grains Maple Pumpkin Seeds Bars. KIND Healthy Snacks 
voluntarily recalled five types of STRONG & KIND bars, as well as KIND Healthy 
Grains Maple Pumpkin Seeds with Sea Salt bars after learning that the company’s 
pumpkin seed supplier may have exposed seeds to traces of peanut protein. The six 
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products were distributed to supermarkets and other retail food and non-food outlets 
nationally. 

Source: http://www.fda.gov/Safety/Recalls/ucm398538.htm 

14. May 21, Spokane Spokesman-Review - (Idaho; Washington) Sprouts from N. Idaho 
producer suspected in E. coli outbreak; owner defends product. Health officials 
advised against eating raw clover sprouts produced by Idaho-based Evergreen Fresh 
Sprouts after the product was connected to seven confirmed and three probable cases of 
E. coli illness in Washington. 

Source: http://www.spokesman.com/stories/2014/may/21/clover-sprouts-suspected- 
local-illnesses/ 
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Water and Wastewater Systems Sector 

15. May 22, Portsmouth Herald - (New Hampshire) Water contamination shuts down 
well at Pease. City officials in Portsmouth shut down a well that serves the Pease 
International Tradeport as a precaution after tests revealed traces of perfluorooctane 
sulfonic acid (PFOS) in the water. 

Source: http://www.seacoastonline.com/articles/20140522-NEWS-140529897 
For additional stories, see items 1 and 27 
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Healthcare and Public Health Sector 

16. May 22, Los Angeles Times - (California) L.A. County finds 3,500 more patients 
affected by data breach. County officials in Los Angeles reported May 22 that an 
additional 3,497 patients may have had their personal information stolen in a February 
theft of 8 computers from the Torrance office of Sutherland Healthcare Solutions, 
bringing the total number of patients affected to roughly 342,000. The newly identified 
patients were Department of Public Health patients who had received Drug Medi-Cal 
services, and the incident is still under investigation. 

Source: http://www.latimes.com/local/lanow/la-me-ln-county-data-breach-20140522- 
story.html 
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Government Facilities Sector 

17. May 23, CNN - (Arizona) Ideal wildfire conditions make battle harder for Arizona 
firefighters. Crews reached 5 percent containment of the 7,500-acre Slide Fire burning 
in the Oak Creek Canyon area near Slide Rock State Park. About 3,200 residents in 
Coconino County were given pre-evacuation notices while roughly 300 homes and 
businesses in the area were evacuated. 
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Source: http://www.cnn.com/2014/05/23/us/arizona-wildfires/ 



18. May 22, Times of San Diego - (California) Cocos Fire 98% percent contained; cost 
to date estimated at $5.7 million. Crews reached 98 percent containment of the nearly 
2,000-acre Cocos Fire that destroyed 36 homes and 1 business in the San Marcos Area. 
Source: http://timesofsandiego.com/crime/2014/05/22/cocos-fire-99-contained-cost- 
date-estimated-5 -7 -million/ 

19. May 22, Lafayette Daily Advertiser - (Louisiana) S.J. Montgomery Elementary 
closed Friday. School officials announced that S.J. Montgomery Elementary School in 
Lafayette Parish will be closed May 23 for cleaning after a May 22 fire caused by a 
student playing with a lighter in the bathroom. The fire caused moderate damage to the 
bathroom and hallways. 

Source: http://www.theadvertiser.com/story/news/local/education/2014/05/22/si- 
montgomerv-elementarv-closed-friday/9454861/ 

20. May 21, Medford Mail Tribune - (Oregon) Health officials identify bacteria linked to 
death at Sams Valley Elementary. Sams Valley Elementary school in Jackson 
County, Oregon, remained closed May 22 after a teacher’s aide died May 20 from 
Group A strep bacteria complications. The school district hired a cleaning company to 
sanitize the school. 

Source: 

http://www.mailtribune.com/apps/pbcs.dll/article?AID=/20140521/NEWS07/40521036 

0 

For another story, see item 5 
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Emergency Services Sector 

See item 5 
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Information Technology Sector 

21. May 23, Threatpost - (International) Apple patches 22 Safari Webkit vulnerabilities. 

Apple released an update for its Safari browser May 22, patching 22 vulnerabilities in 
the Webkit browser engine that could be exploited in drive-by download attacks. 
Source: http://threatpost.com/apple-patches-22-safari-webkit-vulnerabilities 

22. May 22, IDG News Service - (International) Microsoft will patch IE zero day but 
doesn’t give timeline. Microsoft announced May 22 that it plans to patch a use-after- 
free vulnerability in Internet Explorer (IE) 8 disclosed by the HP Zero Day Initiative 
May 21. 
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Source: http://www.networkworld.com/news/2014/052314-microsoft-will-patch-ie- 
zero-281863.html 



23. May 22, Threatpost - (International) Android Outlook app could expose emails, 
attachments. Researchers at Include Security made public May 21 details of two 
content encryption issues in Microsoft’s Outlook app for Android after first reporting 
the issues to Microsoft in December 2013. The issues involve the storage of email 
attachments on devices’ SD card partitions that could make them accessible to any app 
or third party with physical access. 

Source: http://threatpost.com/android-outlook-app-could-expose-emails-attachments 

24. May 22, The Register - (International) Better safe than sorry: SourceForge pushes 
password reset. SourceForge asked its users to change their passwords as part of an 
update to the site’s security systems. New passwords will then be stored in a more 
secure manner in accordance with the updated policies. 

Source: 

http://www.theregister.co.uk/2014/05/22/better safe than sorry sourceforge pushes p 
as sword reset/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

25. May 23, Birmingham News - (Alabama) 3 apartments in Morris Avenue loft fire 
damaged by flames; 17 others saw smoke, water issues. Authorities are investigating 
a 3-alarm fire that broke out at the Liberty House lofts in Birmingham May 22, 
damaging 20 apartment units and some offices, as well as the building’s roof and 
elevator shaft. 

Source: http://blog.al.eom/spotnews/2014/05/3 apartments in morris avenue.html 

26. May 23, Fort Worth Star-Telegram - (Texas) Fort Worth apartment fire displaces 
30 residents. Firefighters responded May 22 to a Fort Worth apartment building to 
extinguish a fire that destroyed 8 units and displaced 30 residents. One person was 
injured while trying to escape the building. 
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Source: http://www.star-telegram.com/2014/05/23/5842564/fort-worth-apartment-fire- 
displaces.html 



27. May 23, WNBC 4 New York City - (New York) Water main break shuts down 

Houston Street, floods Katz's Deli. Five commercial and eight residential buildings in 
the Manhattan area of New York City were without water for several hours and 
basements in the area flooded May 22 after a 20-inch water main broke. Crews worked 
overnight to restore water service and repair a road damaged by break. 

Source: http://www.nbcnewvork.com/news/local/Water-Main-Break-Houston-Street- 
Katz-Deli-Lower-East-Side-26028003 1 .html 



28. May 23, KSHB 41 Kansas City - (Missouri) HazMat leak shuts down Dearborn rest 
area. The southbound rest area off Interstate 29 near Dearborn was closed for several 
hours May 23 while HAZMAT crews worked to contain liquid organic peroxide 
leaking from a semi-truck onto the parking lot and into the grass. 

Source: http://www.kshb.com/news/state/missouri/haz-mat-leak-shuts-down-highway- 
rest-area 



For another story, see item 17 
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Dams Sector 

Nothing to report 



T Return to top i 



NTAS 

NUi Terror hm Mklw»cy Sy*itm 

NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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